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(54) Apparatus and method for processing servlets 



(57) A method and apparatus (or operating a local 
server computer of a client-server network includes a 
technique to receive a request Irom a client computer of 
the client-server network. A determination is made 
whether the request requires dynamically generated in- 



formation from a servlel object of the client-server net- 
work. If so. a specified servlel object corresponding to 
the request may be uploaded from a remote server com- 
puter of the client-server network. The specified servlet 
object is then executed to obtain dynamically generated 
information corresponding to the request. 
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Description ^""7*1 
3rief Description of thg invention 



"1. *V 



V, 



Background of the invontmn 

ls ,e c rir;, d ;r G ^ 

information trom a Con, corner. Web l^Z ™Z^Z* U ~" COmpu "" — 3 
quested information trom a file stored on a permanonTsX del S 1, , ° f C ° mpU ' er IyP,Ca " y r ° lneveS Ihc r - 
den, computer tna, requested the informal J^ J^J^^^^ wcr tne «*» 
" programmmg language. Thus. „ ,s no. easily extended to orl,d a oo 9 V W '" 0n US ' n9 an ob ' OCI °" c ™* 
software marketplace, a product's lack of flex* X an ex.eSn ,UnC "° na " ,y GlV6n lhc d * na ™ "a.uro o, today's 

Current web server software can gene* ^ 
TypicaHy. tne web server receives the requ and tS^^T '° ? T"' ,rom 3 c " onl c«"P«'« 
really create the file Once the die has been creJ J , h ° * C ° mm ° n Galewa >' lnler,a « (CGI) process to dynam- 

" computer. Unfortunately. „ ,s computa, onal^ ex pe s vo 0 .^a oro " ' ranSm " S '" e baCk 10 

generated V expens,vo 10 f0fk a Process each time dynamic information needs Ic be 

In view of the foregoing it would be highly desirable to Drovid^ a c « 
manor, ,n response to a con, computer request but which does ^'^ generates mfor- 

.he dynamic ,n,orma„on. Further „ would be ^I^^Z^IT^ ^'^ wh,,e 9 0;iefa,inc 

5 that is flexible and extendible. * P ° V ' de 3n 00,ocl or ' enled w <* server environment 

_Summary of [ho invention 

mination is made whether the request requ 7 9i dyna m a Iv oenl ^T^'^ °' ^ C " en '- SerVer ne,work ' A 
server network. II so. a specfied servle, o )ec Z^SS^^^T 0 "! 10 " 1 * ^ °' ,he Clien " 

computer of the clienl-server network The specXc sen^oh ° T "° m * rem0,e serV8r 

mformahon corresponding to the request ' S ,he " eX6CU,ed 10 obtain dynamically generated 

..nc£. Th^L^seri:: ZZTT^^ ?E TT.^ h"* *" W ^ » ™>* 

-n a continual loop un„, invoked 'no s at Zt SerV ' e ' ° b ' eC ' S SerV,0, ° b,eC ' S ° P ° rale 
Syobservingacommonapplicationsprogram n, e ° a r,he^ 

of the invents allows unlrusted servlet ob,ec to be execute ? n T 30 '"^ enV ' f0nmenl A,eat "* 

^formation being passed tnm lhe secure J Qa ^ ~ "» -/-mically generated 

3rief Desc ription 0 t the Drawings 

S-^:™^^^^ 

FIGURE 2 is a simplified i.lustration IZl nLZZ, h ? " " ^ embod "™' °' Invention 
FIGURE 3 is a s.mplifiedil.us.ra'ono? taZ k 8 ^ S8fVer and Ihe servle,s 

° ,nteraCt '° nS be,ween a web se ™ and a servle, loaded from an externa. 

FIGUpp - i ! US,raleS processin 9 sle P* associated wth a servle, processing rouhne 

Detailed D escription ol ihe Invention 

Figure 1 illustrates a client-server computer network 20 

mission channel. V iransm,SSl ° n channel 2o. which may be any wire or wireless trans- 
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The clieni computer 22 is a stancard computer including a Central Processing Unit {CPU* 30 connected to a 
memory (primary and/or secondary) 32 The memory 32 stores a numoer of computer programs, inducing a "browser* 
34 As known in the art. a browser is usee to communicate with remote server computers 2- anc to visuatiy presen: 
the information received from such computers. The client computer 22 establishes network communications througr. 
s a standard network connection device 35 

The server computer 24 includes standard server computer components, including a network connection cevice 
40. a CPU 42. and a memory (primary and/or secondary) 44 The memory 44 stores a set of computer programs to 
implement the processing associated with the invention The memory 44 stores a web server 46 Tne web server 45 
may be of the type known in the art. which is modified to include the additional programs snown m Figure i That is 
in an embodiment of the invention, a standard web server 45 is modified to include a server acceptor thread 45. a 
connection queue 50. a pool administrator 52. a thread pool 54. servlets 55. a servlet map 58. a security administrator 
50. and boundary servlets 62. 

Figure 2 is a simplified illustration of a server computer 24A constructed in accordance with an embodiment ol the 
invention The figure snows a web server 45 interacting with a set of servlets 56A-55N In particular tne web server 
'5 46 interacts with the servlets through an application program interface (API). As indicated in Figure 1. the web server 
45 and the servlets 55 are stored m memory 44 The web server 45 may be standard web server software that is 
modified to include the functionality described herein. Each servlet 55 is a piece of software code which is used to 
dynamically generate information. Each servlet 55 is an instantiated software object watting to be invoked. Once it is 
invoked, it dynamically generates information. Note thai this technique of dynamically generating information is distinct 
20 (com the typical process of fetching static information from a permanent storage device. The technique of the invention 
is similar to a CGI script in the sense that it dynamically generates information. However, unlike a CGI script, a servlet 
object of the present invention is instantiated at server start-up Thus the servlet can be thought of as operating in a 
continual loop waiting to be executed. Observe that after instantiation there is no computational start-up expense when 
the servlet is called. 

2S Figure 3 is a general illustration demonstrating additional features of the invention. Figure 3 illustrates a local server 

computer 24A which receives a request Irom a client computer (not shown) over transmission channel 25. The web 
server 45 determines that dynamically generated information from a servlet object is required. In this case, the servlet 
object is not initially on the local server computer 24A. thus it is uploaded by the local server computer 24A from a 
remote server computer 248 using communication link 26. In the example of Figure 3. servlet 56P is passed from the 

so remote server computer 24B to the local server computer 24A. 

Figure 3 illustrates another feature of the invention. In particular, it illustrates that the uploaded servlet 56P is 
executed in a security area 57 of the local server computer 24A After execution, the results are passed to a boundary 
servlet 60 in the remaining portion of the local server computer 24A. This security feature allows untrusted servlets to 
be safely executed. 

j5 The foregoing discussion provides a general description of the features and benefits of the invention. Attention 

now turns to a more detailed description of these features and benefits The left side of Figure 4 illustrates processing 
steps associated with an embodiment of the invention. The right side of Figure 4 illustrates program components that 
may be used to execute these operations. 

The first processing step shown in Figure 4 is to determine whether a new request has been received (step 70). 

•*o As indicated above, a request is a request for information from a client computer 22 to a server computer 24. The 
operation of a client computer 22 requesting information from a server computer 24 is well known. It is typically per- 
formed using a Uniform Resource Locator or URL. A URL specifies a computer and a file. A typical URL is http://SU/ 
123. This URL is an instruction to retrieve the fife "123" from the State University computer "SU" using the Hyperiext 
Transfer Protocol "HTTP". 

J 5 As shown in Figure 4. a server acceptor thread 43 is used to process each new request. Preferably, the invention 

is implemented as a connection-oriented web server with a server acceptor thread that continually loops while accepting 
requests. Once a request is received, it dispatches the request to a connection queue (step 72). As shown in Figure 
1 . the connection queue 50 is formed in the memory of the local server computer 24. 

II no new request is received, then a check is made to determine whether the queue is empty (step 71). If the 

so queue is not empty or a new request has been received, processing proceeds to step 74. Step 74 entails thread pool 
administration operations, which are executed by a pool administrator 52. Figure 1 illustrates a thread pool 54. The 
thread pool 54 is a pool of threads that are used for request processing. Individual threads fetch and process requests 
from the connection queue 50. The pool administrator 52 operates to ensure that there is a thread for each request in 
the connection queue 50. The pool administrator 52 creates or forks additional threads to handle new requests in the 

55 connection queue 50. It a maximum number of threads is reached, the pool administrator 52 blocks new requests from 
entering the connection queue 50. In such a case, the server computer does not receive new requests. On the other 
hand, if a thread has been waiting more than a predetermined period of time for a request from the connection queue 
50. then the pool administrator 60 will destroy it. Preferably, a new handler thread is created using the buffer space of 
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a destroyed handler thread in oiher .vor*- -ho 

area (step 96). a boundary servlei rnav ^Tl I ° ynsm,ca "V Senera.ed results are pa 1 Mn T ' ' S 

presen, Lj£^™™ '° 9enera,e a 9 ra P h '«» ««pi«y on a c^ c ' r. ° ' aPP ' e '' ' S e * ecu,ab '* 

P — S e, 0(cond ,, nsor ^ 

a ° e * e cuted by using iis URL 
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{o 9 hit? //host' < servlei U.^L>) Tne hug protocol supports tne passing of arguments tnus arguments may go r-asse:: 
to :he servlei (e g h:;p.//r.os;» < servlei \J?.L>~'< arguments >) The orcoerwes oojeci :s a JAVA c:c-z;arr.rr.;r.~ \ar. z-j a zo 
properties class which comprises a set of "name value" pairs A system administrator can pass arguments to an in- 
stantiated HttpServlet object through the properties object in tnis way tne system administrator can "customize* an 
HttpServlet lor a particular server ai a particular site .-or example tne system adminis;ra:c: can oass :ne :-;::2serv!e: 
object site specific information about me network location cl a database wmch stores documents tnat will bo requestec 
by client processes across tne network or the amount of memory available in system buffers wmch will oo used lor 
processing the server acmmistrator 

Once instantiated, a servlet loops until the server is shut off or a destroy method is called on the servtei by ine 
server Since the servlet operates in a continual loop as a wans for requests to act upon tne server computer avoics 
the overhead of creating ana destroying the servlet between requests to the servlet. In addition, keeping servlets alive 
between requests allows servlets to pass data and communicate amongst themselves ."or example servlets can 
maintain data about a user between sessions by the user This data can be shared among different servlets m order 
to customize a working environment within which the user works II servlets were created and destroyed cn a per 
request basis, it would be much more difficult, if not practically tmoossible. for a servlet to understand the environment 
within which it runs and utilize this knowledge to provide improved processing capabilities Tne server computer can 
call a destroy method on the servlet when some resource limit in terms of time memory etc is reacned 

The servlet application program interface (API) estabhsnes a standard for interfacing servlets with information 
servers, such as web servers The servlet API contains methods for initializing a servlet. processing the request getting 
servlet information, and destroying the servlet. The servlet API allows platform mdepencen; servlc-ts An example 
servlei interface is as follows 

Servlet interface: 
interface HttpServlet { 

Initialize (ServletContext, ServerProperties); 

Service(HttpRequest, HttpResponse); 

DestroyO; 

} 

The server computer passes objects that implement the 'HttpRequestV while the servlet returns an "Hi-pResponse" 
object. The "ServletContext" interface is used to exchange information with the server environment. Some of the meth- 
ods on the "ServletContext" object are "Getserver()" and "GetServlets()'. 'GetServer* returns a pointer to the parent 
server within which the instantiated HttpServlet runs. Using this pointer, the HttpServlet object can find out information 
about its parent server. The "GetServiet" method returns pointers to the servlets running on the parent server. The 
"ServerPropenies" interface is used to exchange information regarding specific server properties established by a 
server administrator 

Servlets support the familiar programming mode! of accepting requests and generating responses The following 
is a simple servlet defining a single method called "service" 
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import java.servlet.*; 

public class MyServlet extends GenericServlet { 
public void service ( 

ServietRequest request, 
ServletResponse response 
) throws ServletException, lOException 
{ 

} 

} 

-he, pa,.™.,, trough an ^ stream — e n™ or 

ServleilnpuiSiream in = recuest.ge!lnpu!S>r°am () 
Servlo.OuIputSiream oul = response.getOuipulStream (). 

as differently named servle.s. The da.a nrn^-n =. * ° 6 n, " a "" a w,lh d, " e ' ent and be manaced 

pers,s Ie n. msiance-specif.c slate. mM.aHzat.on ume includes an area where each .nsianco keeps' as 

Building upon the previous simole servlet examnle* tha i«m„.. _ 
used ,o send Hypenex, Mar ku p Language ^^X^ZT" "** " " e><amP,e °' 8 M "" 81 !hal < S 
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public class-SimpleServlet extends GenericServlet { 
public void service(ServletRequest req, ServletResponse res) 
throws ServleiException, IOExccption 

c 

res.setContentTypeC'text/htmr*); 

PrintWriter out = new PrintWriter(res.gelOutputStream()); 
out.printin( M <HEAD> < TITLE > SimpleServlet Output 
< /TITLE > </HEAD> <BODY> ,, ); 

out.println("<hl > SimpleServlet Output </hl>"); 
out. printing <P>This is output from SimpleServlet."); 
out.println("</BODY> M ); 
out.flush(); 

} 

public String getServletlnfoO { 

return "A simple servlet"; 

} 

} 

The following program code is an example of a servlet that uses the finger protocol to query information about 
users on specified host computers." The query string parameters < U > user < /u >. < tt > hosts < At >. and < it > verbose 

< /tt > can be used to specify the user and hosts to query The parameter <tt> user </tt> is the user name. <tl> hosts 

< /tt > is a comma-separated list of host names to query, and <tt> verbose </U>. if specified, will cause verbose output 
to be generated. For example. <pre> http /goa/finger.himl?user=dac&hosts=eno.doppio&verbose=yes </pre> will re- 
quest full information about user "dac" on both hosts "eno" and "doppio". 



EP 0 810 524 Al 



public 

class FingerServIet extends GenericServlet { 
/* 

* Port number for finger daemon. 
*/ 

static final int FINGER_PORT = 79; 
/** 

* Handles a single finger request from the client. 

public void service(Serv!etRequest req, ServletRespon 
throws Sen/letException, IOException 

{ 

String user = req.getParameterfuser"); 
String hosts = req.getParameter("hosts*'); 
String verbose = req.getParameterCverbose"); 
res. setContentTypef text/html"); 



PrintStream out = new PrintStream(res.getOutputStrearn()); 
out.println("<html>"); 

out.println(" < head >< title > Finger Servlet < /title > < /head > 

out. printing < body >"); 

out.println( M < h2 > Finger results: < /h2 > "); 

outprintln(" <pre> "); 

if (hosts == null) { 

fmger(out, user, null, >s\equalsIgnoreCase(verbose)); 
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}else { 

StringTokenizer st = new StringTokenizer(hosts, "/); 
while (st.hasMoreTokensO) { 

Siring host = st.ncxtTokenQ; 

ouLprintln(T + host + "]"); 

try { 

fingcr(out, user, host. 

H yes\equalsIgnoreCase(verbose)); 

} catch (IOException c) ( 
out.println(c); 

} 

out.printlnO; 

} 

} 

out. printing </pre> M ); 
out.printlnf </body> </html>**); 

} 

/• 

* Sends finger output for a user and host to the specified output 

* stream. 

void finger(OutputStream out, String user, String host, boolean verbose) 
throws IOException 

{ 

// open connection to finger daemon 
Socket s; 

if (host = = null) { 

s = new Socket(InetAddress.getLocaIHost(), 

FINGER_PORT); 

} else { 

s = new Socket(host, FINGER_PORT); 

} 

// send finger command 
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PrintStream ps = new PrintStream(s.getOutputStream()); 
if (verbose) { 

5 

ps.print(7W); 

} 

if (user ! = null) { 

to ' 1 

ps.print(user); 

} 

, 5 ps.print("\r\n"); 

ps.flushO; 

// copy results to output stream 
j InputStream in = s.getInputStream(); 

byie[] buf = new byte [512]; 
int len; 

while ((len = in.readftuf, 0, buf.length)) != -1) { 
out.write(buf, 0, len); 

} 

s.closeO; 

} 

} 

specte error messages. They can get ace M . k>M«2 h t reqUSSIS '° 01her l0call0ns and send HTTP- 
eluding me HTTP method ,o be perfo Z and he U 7t ^ f Wer ' paSsed ^ standard HTML forms. ,n- 

As indicated above, one ol ,he b,gges, per orm^ll " deslina "° n °' 'he request 

new process for each r ep uest. In nJS^Z^ , ^•r ,, " " ** d0 n °' ^ C — °< a 
serve. When used in such environments with HTTP servtels p ov de °™ ^ ^ Same pr0Cess as ,h * 

he CGI approach and .he Fasi-CGI approach This is belauseT e l !7 9 Per,ormance **an.ag« over bo,h 
thread context switches. S,nce ,n ^n.ironm^^^Z^^ " Sma " co ^'°^ expense during 
-nrtahzed. me cos, o, the initialization is spread w^^Z^l™? MCh "™ lhe V «• 

opportunity ,o share data and communions reset ces bene So mc !, ? QUeSlS '° ' ha ' S6rVICe have ' h e 
Those skUled in the an will appreciate thai lhe se^iefs e mh„H ^ 9 V ' f ° m Syslem caches 

d.gm. The servlets can provide secure web-based accessTo 6aZ wh 11 ^ ,he re ^«'^s P onse para- 

can be used for interactively viewing or modifying ?£ dal usto dvnarn '"T* ^ H ™ L Web Da 9 es ** »»y 

The servte.s embodying lhe invention may be used ,o oZde cuT T P3 " 9enera "° n ,echni ^ es 
The servlets are also f|ex|b , e V te U ^;^"*°' n ««J -"'"user services lor customer bases 

HT , P (or HTTPS) protocols, and proxy.ng services £c Till IT IT S ' aIiC Web pa ° es *<°^ 'he 

written ,n any language. application systems, they can .n turn be clients to other services. 
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Those skilled in the an will aporeaaie that servlets may 09 usee in several modes The basic node is at tne core 
of a request/response protocol in addition servlets may oe specialized to suoport protocols sucn as HTTP in HTTP 
based applications, servleis are portable, complete, and mucn more efficient replacement for CGI based extensions 
Also m HTTP applications servlets may be used with HTML server sice includes to dynamically generate part ol a 
web document. 

The foregoing aescription. lor purposes of explanation, used specific nomenclature to orovide a thorough under* 
standing of examples of the invention However, it will bo apparent to one skilled in the art tnat the specific details are 
not required in order to practice other examples ol the invention. In other instances, well know circuits and devices are 
shown in oiock diayram form in order to avoid unnecessary distraction from the unaerlymg principles Thus, tne fore- 
going descriptions of specific embodiments of the present invention are presented for purposes of illustration and 
description 



Claims 

1 . A method executed by a local server computer under the control of a program, said local server computer including 
a memory for storing said program said local server computer forming a portion of a client-server network, said 
method comprising the steps of. 

receiving a request from a client computer of said client-server network; 

determining that said request requires dynamically generated information from a servtet object of said client- 
server network: 

uploading from a remote server computer of said client-server network a specified sen/let object corresponding 
to said request: and 

executing said specified servlet object to obtain dynamically generated information corresponding to said re- 
quest. 

2. The method of claim 1 further comprising the step of passing dynamically generated information from said specified 
servlet object to a web server operating on said local server computer, said passing step being facilitated with an 
application program interface. 

3. The method of claim 2 wherein said application programming interlace specifies techniques for performing at least 
one of the following operations: initializing a servlet object, executing a servlet object, and destroying a servlet 
object. 

4. The method of claim 2 wherein said specified servtet object and said application program interface are specified 
as object bytecodes in the JAVA programming language 

5. The method of claim 2 further comprising the step of sending said dynamically generated information from said 
web server to said client computer. 

6. The method of claim 1 wherein said executing step includes the steps of 

executing said specified servlet in a security area of said local server computer: and 

passing said dynamically generated information from said security area to a non-security area of said local 
server computer. 

7. The method of claim l wherein said local server computer stores a plurality of servlet objects, each of said servlet 
objects continuously operating until invoked in response to a specified request from a client computer. 

8. The method of claim 7 wherein said plurality of servlet objects pass data to one another. 

9. The method of claim 7 wherein said selected servlet objects of said plurality of servlet objects are instantiated at 
the start-up of said local server computer. 

10. The method of claim 7 wherein selected servlet objects of said plurality of servlet objects are instantiated in re- 
sponse to a demand from said client computer. 
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11. The method of c;a,m 7 where.n selected servle: coiects of sac plu.-ai.ty of se.-vie-: oo,e- s „» 

sponsa lo an activated servlel URL 1 ,n Sian,: a .ei i.n 

12. The method of claim n wherein saia servlel UnL includes arguments 

1 3. The metnod o, ctaim , wherein sa,= roccvng step .nc.udes the step o, stonn S sa,c roouest ,n a connects oueuo 

14. The method of claim 13 wherein sa.d determining step includes tho sl90 o( , . 

of handler threads to execute sa,d determining step ' ' 9 * ^ < f0m a ^ 

1 5. The method of claim 1 4 further composing the step of operating sa,d pool of handler threads bv »i e r . „«. 

a new handler thread and destroying an old handler thread anol ° r '^ds by selectively creating 

: isrcsrsssssr - ~~ «— * ~«~ — « 

"■ ™= s^™ - - - - - *—* - 

~^.^1™2Z^*~'™^*'*^™ 

a servle. ob,ect of said server computer- Q dynamically generated information from 

l^:^^Z^ Said SPeC " ied SS,V,et ° bieC1 1 ° — ^am.ca.ly generated formation 
a fourth set of ins.ruc.ions to pass said dynam.caHy generated information to said diem computer. 

Sr^SZ^ZT" - °< ~- — — ns to .nterpre, a servle, URL 

wlTh I?™*::' da ' m ^ S6t °' ~ions ,o .nterpre, a servle, URL 

25. The apparatus o, Ca.m 22 further comprising a f.th set o, instructions to store a p,ura,„ y o, servlet objects on said 
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server computer eacn of said serviet objects continuously cceratmg until invokes in response toa speciiiec recues; 
from a cheni computer 

26. The apparatus of claim 20 wnerem said fifth set of instructions include instructions to pass ca : .a between sac 
plurality of serviet objects. 

27. A client-server computer network comprising 

a client computer to generate a request: and 
a server computer to 

determine that said request requires dynamically generated information from a serviet ooject of saic server 
computer. 

execute said specified serviet object to obtain dynamically generated information corresponding :o saic 
request, and 

pass said dynamically generated information to said client computer. 

28. The apparatus of claim 27 further comprising a remote server computer storing a set of serviet objects tnai can 
be passed to said server computer. 

29. The apparatus of claim 27 wherein said server computer stores a plurality of serviet objects, each of said serviet 
objects continuously operating until invoked in response to a specified request from said client computer 

30. The apparatus of claim 29 wherein said plurality of servlei objects pass data between themselves. 
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(Frc.T. sie? £0; Figure.-) 
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